Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
File:                     6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier:          l9h/YYAjGjlzLvWP6nij0KuGfxuDVqvEm3iy7SoOZcE=
Subject key identifier:   86:A8:F8:30:0F:E2:EF:DE:AF:99:90:E5:C6:2D:83:1C:72:AD:01:15
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       0597
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
Signing time:             Sat 28 Sep 2024 23:13:01 +0000
ROA not before:           Sat 28 Sep 2024 23:13:00 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     135386
IP address blocks:        103.155.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Sep 28 23:13:00 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f88d7c-dba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:bb:0e:8e:7b:5e:b8:b0:79:14:7d:da:2e:
                    c4:51:2d:11:2f:13:7b:4b:9d:ee:f5:35:fb:4d:f5:
                    81:fd:0a:12:ed:3b:b8:e2:fa:0b:38:75:0e:e7:7a:
                    59:6e:14:10:a7:4f:24:21:f4:91:34:37:f3:52:d6:
                    4e:a8:24:5a:ce:f5:7d:73:a1:6e:60:fb:46:e0:58:
                    80:f2:c6:1f:23:4f:47:2f:fd:84:69:28:fa:01:61:
                    7d:55:05:c3:b4:c4:93:c2:35:69:4c:ec:d2:f8:71:
                    36:3a:5f:bf:47:29:60:f8:52:22:a3:c7:8d:32:b4:
                    64:e8:8a:ae:1e:6b:86:82:cd:04:86:c1:4f:b7:99:
                    86:7d:92:fb:d2:9e:1c:fb:e9:64:3d:ac:fb:07:0d:
                    32:4c:54:81:44:04:d9:d8:58:65:ba:bc:1e:34:30:
                    84:e2:35:45:d1:13:4f:29:b2:c1:39:54:60:34:18:
                    ac:f2:ff:53:68:af:87:b9:38:6f:37:91:ca:5c:d2:
                    6b:11:f4:e6:f1:f2:f3:4a:c3:5d:b5:5f:d0:eb:2b:
                    ac:1e:22:e9:94:db:9b:33:fb:ad:b3:ac:da:7e:a9:
                    9a:cc:71:cc:65:a6:dc:8d:66:76:61:9c:ab:a5:4d:
                    f5:36:37:4e:f1:0b:dd:95:99:ac:3b:f6:7a:b8:8f:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:F8:30:0F:E2:EF:DE:AF:99:90:E5:C6:2D:83:1C:72:AD:01:15
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:f2:6a:12:f0:fb:0f:b8:4a:fd:5d:d5:ba:ea:09:24:a8:
         37:37:b9:2f:0e:19:d7:f7:d3:0d:9e:49:f0:4e:08:a0:ac:e7:
         d9:6b:fa:fc:85:06:01:b2:78:3d:28:49:40:ed:12:a9:5a:35:
         05:a4:13:dc:a7:d4:f5:f8:e6:20:fc:9d:d1:ce:40:db:ea:76:
         1f:e5:21:9a:ed:c7:29:88:13:09:92:0d:04:95:35:44:d9:62:
         77:40:33:93:7f:3e:a4:e7:ec:71:59:40:28:22:9f:68:c3:3c:
         31:a9:5f:1c:e7:07:0a:8a:6a:91:e9:ce:69:91:66:12:fd:68:
         43:ae:58:74:1c:dc:99:ab:1b:73:0a:17:06:59:5b:76:f1:70:
         96:a9:40:22:b8:a9:8e:07:7e:8e:35:01:d5:ea:0e:f9:4a:a1:
         1f:aa:1e:f3:28:c3:1e:90:dd:32:0c:34:0d:38:e7:8f:2e:52:
         ad:47:d4:0f:04:2d:d5:5a:58:3e:fe:01:8b:6b:ba:6f:6c:bd:
         86:dc:e3:98:bd:61:45:a4:61:45:a0:db:0f:a0:43:c5:99:44:
         7f:f7:57:4e:58:f4:21:90:01:53:1e:c5:9a:79:98:3a:bc:66:
         21:79:d0:80:78:d7:cf:c5:cf:f9:6a:29:65:38:7b:8e:3a:35:
         ef:bb:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:18 2024 by rpki-client on console-fra.rpki-client.org